posts

From Reflected XSS to Container RCE in LocalStack via CloudFormation Deploy UI

A reflected XSS in LocalStack's CloudFormation deploy UI, chained into code execution inside the container.

Exploiting CORS vulnerability with basic origin reflection

A CORS misconfiguration with basic origin reflection that let an attacker steal API keys, emails and session tokens.

Presenting Bruter: a Web Server Testing Tool

A lightweight Go tool for web server testing and configuration validation.

Presenting Scanme: Deep Dive into Network Scanning with Golang: Building a Port Scanner

Building a port scanner in Go to understand what happens under the hood of network scanning.

Wannabe Security Researcher!?!?

A passive RDP data extractor: pulling banners, TLS and NTLM details from a service without getting blocked.